skills/alvindean/soniq/sales-engineer/Gen Agent Trust Hub

sales-engineer

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted JSON data files that could potentially contain malicious natural language instructions designed to influence the agent's behavior during the pre-sales engineering workflow. * Ingestion points: The skill ingests requirements data from 'assets/sample_rfp_data.json' and expects the agent to process other JSON inputs such as 'competitive_data.json' and 'poc_data.json'. * Boundary markers: There are no explicit delimiters or 'ignore embedded instructions' warnings provided in the workflow for the data being processed. * Capability inventory: The skill allows the execution of local Python scripts (rfp_response_analyzer.py, competitive_matrix_builder.py, poc_planner.py) via shell commands. These scripts perform data analysis and validation but do not possess network access, privileged file system access, or other high-risk capabilities. * Sanitization: While the Python scripts use standard JSON parsing, they do not include validation logic to identify or neutralize potential prompt injection patterns within the ingested data.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 01:32 PM